Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-61857

Опубликовано: 11 июл. 2026
Источник: nvd
CVSS3: 3.7
CVSS3: 7.5
EPSS Низкий

Описание

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия до 6.9.13-51 (исключая)
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия от 7.0.0-0 (включая) до 7.1.2-26 (исключая)

EPSS

Процентиль: 18%
0.00266
Низкий

3.7 Low

CVSS3

7.5 High

CVSS3

Дефекты

CWE-252

Связанные уязвимости

CVSS3: 3.7
ubuntu
23 дня назад

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

CVSS3: 6.5
redhat
23 дня назад

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

CVSS3: 3.7
debian
23 дня назад

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerabili ...

CVSS3: 3.7
github
23 дня назад

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

suse-cvrf
14 дней назад

Security update for ImageMagick

EPSS

Процентиль: 18%
0.00266
Низкий

3.7 Low

CVSS3

7.5 High

CVSS3

Дефекты

CWE-252